NIS2 and SMEs: what does it mean for your crisis management?
The NIS2 directive sets requirements for business continuity and crisis management, including for organisations that were previously out of scope.
Under the NIS2 directive, more sectors and organisations fall under European cybersecurity requirements. These include measures for business continuity and crisis management, such as backup management and recovery after an incident.
For many SMEs this is new territory. You need a plan, but also a team that knows how to act when systems fail or data can’t be reached.
A crisis exercise built around a realistic IT scenario shows whether the arrangements work. The evaluation report helps you demonstrate that you take the requirements seriously.
Resilience isn’t in the plan. Resilience is in your team.
Written by the Crisis Dynamics team